Partial change for PLFM-1977

This is add API for manipulating evaluation ACLs.  Changes include:

1) Rename PermissionsManager to EntityPermissionsManager
2) Add EvaluationPermissionsManager (skeleton code only) and UserEvaluationPermissions
3) Refactor the user group methods by moving them from PermissionsManager to UserManager